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Amdt. Dated February 14, 2005 

Reply to Office Action dated October 14, 2004 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Canceled) 

2. (Canceled) 

3. (Canceled) 

4. (Canceled) 

5. (Canceled) 

6. A method for sending an onoryptoda message, said method comprising the 
steps of: 

a) generating by a sender a password P: 

h\ sending the password P to a message recipien t over a first channel: 
ti) generating authentication information bv the sender for server 
authentication of the me ssage recipient: 

ad) generating by the sender a random number as an initialization vector 

IV4; 

be) generating bv the sender a private key PK as H(IV4 1 P), where P is a 
password known to a message recipient; 

e)£ generating bv the sender a n encryption ENC = E(M I H(M), PK), where 
E is a predetermined symmetric key encryption algorithm. M Is the message and 
H( ) is an agreed upon hashing algorithm : and 

dg) sending the authentication information and (IV4. ENC) from the 
sender t o sa i d mopaaoo rocip i on t the server over a second c hannel: 

? hl authenticating the message recipient over a thi rd channel using the 
information: 
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i) carting FMC from the server to th e message recipient over the third, 
rhannpl nnlv when the message recipient has heftn authenticated bv the server, 

7. A method as described in claim 6 comprising the further step of receiving 
authentication of said message recipient prior to sending (IV4, ENC), 

8. A method as described in claim *£_where said message recipient is 

authenticated by the steps of: 

a ) - gonorating a paooword P; 

b) oonding oaid password P to oaid mossago rooipiont ovor a first, socu re 
ohannol; 

ei) .generating bv the sender a first random number as a first initialization 
vector IV1; 

<*b) .generating hv the sender H(IV1 I P) as an authentication key AK; 

ec) generating by the sender a n authentication string AS as E(ACNST1 , 
AK), where ACNST1 is a predetermined constant and E is a predetermined 
symmetric key encryption algorithm; 

ri ) senriinn 1V1 and AS to the server over the second channel 

f§) -generating by the server a second random number as a second 

initialization vector IV2; 

§f) ending from the server s aid vectors IV1 and IV2 to said message 

recipient over a-the G O0ond - t bjfd_channel; 

g) generating bv the message recipient a th ird random number as a third 

initialization vector l V3: 

hi regenerating hv the messag e recipient the authentication kev AK; 
i) regenerating bv the message recipi ent the authentication string AS: 

h) roGoiving a third random numbor ao a third i n i t i a l isation vootor 1V3 an d 
an authentication rooponoo AR from said rooipiont ovor said second ohanno l ; 

ij) generating h Y the message recipient a n authentication response key 
ARK as H(IV2 I IV3 I AS); 
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k) generating bv the message recipient the authent ication response AR 
as E(ACNST2. ARK), where ACNST2 la a predetermined constant and g is a 
pr edetermined symmetric kev e ncryption algorithm: 

ft sending from the recipient to the server IV3 and AR: 
m) regenerating bv the server the auth entication response kev ARK as 
HflV2 I IV3 1 ASV. 

in) gnnn rat i ng computing bv the server a decryption D(AR, ARK), where 
D is a symmetric decryption algorithm corresponding to E; and 

ko) authenticating said message recipient only if D(AR, ARK) - ACNST2, 
where ACNST2 is a second predetermined constant. 

9. . (Canceled) 

1 0. A method as described in claim 6 where H Is an encryption algorithm defined 
hash algorithm using said encryption algorithm E. 

1 1 . A method as described in claim 10 where said encryption algorithm is 
expressed in less than 1000 bytes of code; whereby software comprising said algorithm 
can be quickly downloaded to a user's system. 

1 2. A method as described in claim 1 1 where said encryption algorithm is an 
RC4 algorithm. 

13. (Canceled) 

14. (Canceled) 

15. (Canceled) 

16. (Canceled) 

17. (Canceled) 
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18. A method for receiving an encrypted message that was originally sent by a 
sender to a server over a second channel , said method comprising the steps of: 

a) receiving (IV4, ENC) from a server over a third channel, where ENC = 
E(M I H(M), PK), M is said message, a«d~E is a predetermined encryption 
algorith m. IV4 is a random number as an ini tialization vector, and H( ) is an 
ag reed upon hashing algorithm : 

b) generating PK as H(IV4 I P), where P is a password received from a 
the sender of said message over a eeeufe-first_channel; 

c) generating D(ENC, PK) = (M I H(M)), where D is a symmetric key 
decryption algorithm corresponding to E; 

d) calculating H(M) from said value of M generated in step c; and 

e) accepting said generated value of M only if said calculated value of 
H(M) equals said value of H(M) generated in step c. 

19. A method as described in claim 18 where H is an encryption algorithm 
defined hash algorithm using said encryption algorithm E. 

20. A method as described in claim 19 where said encryption algorithm is 
expressed in less than 1000 bytes of code; whereby software comprising said algorithm 
can be quickly downloaded to a user's system. 

21 . A method as described in claim 46-19 where said encryption algorithm is an 
RC4 algorithm. 

22. A method as described in claim 18 where said initialization vector IV4 and 
said encryption ENC are received from said sender through a server, 

23. (Canceled) 
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24. (Canceled) 

25. (Canceled) 

26. (Canceled) 

27. (Canceled) 

28. (Canceled) 

29. (Canceled) 

30. (Canceled) 

31. (Canceled) 

32. (Canceled) 

33. (Canceled) 

34. (Canceled) 

35. (Canceled) 

36. (Canceled) 
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